This page sets out what information Cuprix collects, why it is collected, how long it is kept, and how to have it removed.

Cuprix Ltd is based in Clare, Ireland, and is the data controller for the information described here. We are subject to the General Data Protection Regulation and the Irish Data Protection Act 2018.

We do not sell personal data, we do not share it for advertising, and we do not use third-party advertising or analytics trackers on this website.

Last updated 2 September 2026

If you use the contact form, we receive the name, email address and message you submit. The form is handled by Netlify Forms, and submissions are stored in our Netlify account. We use them only to reply to you.

This site is hosted by Netlify, which keeps standard server logs including IP addresses for security and abuse prevention. We do not run analytics, advertising pixels or tracking cookies. Fonts are loaded from Google Fonts, which means your browser makes a request to Google when a page loads.

Retention. Contact form submissions are kept for as long as the enquiry is live and for up to 24 months afterwards, then deleted.

Some of our Instagram posts invite you to comment a keyword — for example email — to be sent a link to a guide. If you do, an automated process handles your comment.

What we receive. Meta sends us the comment text, the comment ID, the ID of the post, and the Instagram username and Instagram-scoped user ID of the person who commented. We do not receive your email address, your phone number, your follower list or any part of your profile beyond your username.

What we do with it. We check whether the comment contains the keyword. If it does, we send you one Instagram direct message containing the link, and post one public reply to your comment. We also send ourselves a notification, over Telegram, containing your username and the text of your comment, so a person knows the conversation has started.

What we do not do. We do not add you to a mailing list, we do not build a profile of you, and we do not message you again unless you reply to us first. Commenting is not consent to marketing.

Legal basis. Legitimate interest in responding to a direct, voluntary request you made by commenting. You can object at any time using the contact details below.

Retention. The automation runs on our own n8n instance. Execution records containing your username and comment are kept for up to 30 days for troubleshooting, then deleted automatically. The Instagram conversation itself remains in our Instagram inbox until we delete it.

Meta's role. Instagram is operated by Meta, which processes your data under its own privacy policy. Deleting your comment on Instagram removes it from Instagram, but does not delete records already sent to us — email us and we will remove those.

If you email us or book a call, we keep that correspondence and any notes needed to do the work. Our email is Google Workspace, and calendar invitations are handled by Google Calendar.

Correspondence relating to an active or prospective engagement is kept for the life of that relationship and for up to six years afterwards where we are required to retain records for tax or legal purposes. Everything else is deleted sooner.

We use a small number of service providers who process data on our behalf:

• Netlify — website hosting and contact form submissions
• Meta Platforms — Instagram comments and direct messages
• Google — email, calendar and web fonts
• Telegram — internal notifications to us

Some of these providers are based outside the European Economic Area. Where that is the case, transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.

Under GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable format.

Email michael@cuprix.ie and we will respond within one month. There is no charge.

If you are not satisfied with how we have handled your data, you can complain to the Irish Data Protection Commission at dataprotection.ie.

If this policy changes materially we will update the date at the top of this page.